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Question: 1 


DRAG DROP 
Drag and drop the Cisco WSA methods from the left onto the correct deployment modes on the 
right. 
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Explanation: 


You could use an explicit setting (browser config/PAC/WPAD) or transparent (WCCP/PBR) to point to 
the first proxy and then the first proxy will route based on category to one of the two upstream 
proxies based on your policy configuration. 

Reference: 
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Question: 2 


What causes authentication failures on a Cisco WSA when LDAP is used for authentication? 


A. when the passphrase contains only 5 characters 

B. when the passphrase contains characters that are not 7-bit ASCI 

C. when the passphrase contains one of following characters ‘@ # $% ~ 
D. when the passphrase contains 50 characters 


Answer: B 


Reference: 
https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b WSA UserGuide 
b_WSA_UserGuide_appendix_011001 


Question: 3 


Refer to the exhibit. 


1278096903.150 97 172.xx.xx.xx TCP_MISS/200 8187 GET http://my.site.com/ - 
DIRECT/my.site.com text/plain DEFAULT_CASE_11-AnalizeSuspectTraffic-Identity-OutboundMalwareScanningPolicy- 
DataSecurity Policy- -ExtemalDLPPolicy -Routing Policy 


4 p Pia IW, _comp,-,-",“-", 
“Unknown”, f “Unknown”: n- ” 198. 34,0,- [Local], “-”,37, “W32. CiscoTestVector”,33,0, 
“WSA-INFECTED-FILE. oat’ “fdSef49d4213e05£448f1 1ed9c98253d858296 1 4fba368a421d14e64c426daSe”> - 


Which statement about the transaction log is true? 


A. The log does not have a date and time 

B. The proxy had the content and did not contact other servers 

C. The transaction used TCP destination port 8187 

D. The AnalizeSuspectTraffic policy group was applied to the transaction 


Answer: D 


Question: 4 


Which two features can be used with an upstream and downstream Cisco WSA web proxy to have 
the upstream WSA identify users by their client IP address? (Choose two.) 


A. X-Forwarded-For 
B. high availability 
C. web cache 

D. via 

E. IP spoofing 
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Answer: AD 


Reference: 
https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b WSA UserGuide 
b_WSA_UserGuide_chapter_0100 


Question: 5 


Which two configuration options are available on a Cisco WSA within a decryption policy? (Choose 
two.) 


A. Pass Through 
B. Warn 

C. Decrypt 

D. Allow 

E. Block 


Answer: AC 


Reference: 
https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_ guide 
b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_01011 
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